Unified Access Point Administrator’s Guide Table of Contents Section 1 - About This Document ....................9 Document Organization ............................9 Additional Documentation ............................. 9 Document Conventions ............................9 Online Help, Supported Browsers, and Limitations ..................... 10 Section 2 - Getting Started ......................11 Administrator’s Computer Requirements ......................
Page 3
Unified Access Point Administrator’s Guide Controlling Access by MAC Authentication ......................58 Configuring a MAC Filter and Station List on the AP..................59 Configuring MAC Authentication on the RADIUS Server ................59 Configuring Load Balancing ..........................60 Managed Access Point Overview ........................60 Transitioning Between Modes ........................
Page 4
Unified Access Point Administrator’s Guide Viewing the Last Proposed Set of Changes ....................109 Configuring Advanced Settings ........................109 Viewing Wireless Neighborhood Information ....................110 Viewing Details for a Cluster Member ......................112 Appendix A - Default AP Settings ..................113 Appendix B - Configuration Examples ................115 Configuring a VAP .............................
Page 5
Unified Access Point Administrator’s Guide List of Figures Figure 1 - Administrator UI Online Help ........................10 Figure 2 - Web UI Login Prompt ..........................14 Figure 3 - Provide Basic Settings ..........................15 Figure 4 - Command Line Interface (CLI) Connection .................... 18 Figure 5 - Viewing Interface Status .........................
Page 6
Unified Access Point Administrator’s Guide Figure 60 - Configure Client QoS DiffServ Class Map Settings ................96 Figure 61 - Configure Client QoS DiffServ Policy Map Settings ................100 Figure 62 - QoS Configuration Status For Associated Clients ................101 Figure 63 - Manage Access Points In The Cluster (Passive) ................
Page 7
Unified Access Point Administrator’s Guide List of Tables Table 1 - Typographical Conventions ........................10 Table 2 - Requirements for the Administrator’s Computer ..................12 Table 3 - Requirements for Wireless Clients ......................12 Table 4 - Basic Settings Page ..........................17 Table 5 - CLI Commands for Ethernet Setting ......................
(CLI) for managing, monitoring, and configuring the switch. •) The User Manual for the D-Link Unified Wired and Wireless System provides information about setting up and managing the Unified Wireless Switch (UWS), including information about how to use the switch to manage multiple UAPs.
Unified Access Point Administrator’s Guide Section 1 - About This Document Symbol Example Description Curly Braces {} {Choice1 | Choice2} Indicates that you must select a parameter from the list of choices. Vertical Bars | Choice1 | Choice2 Separates the mutually exclusive choices. Braces within square [{Choice1 | Choice2}] Indicate a choice within an optional element.
(UI), command-line interface (CLI), or SNMP. In Managed Mode, the UAP is part of the D-Link Unified Wired and Wireless System, and you manage it by using the D-Link Unified Wireless Switch. If an AP is in Managed Mode, the Administrator Web UI, Telnet, SSH, and SNMP services are disabled.
Unified Access Point Administrator’s Guide Section 2 - Getting Started Required Software or Component Description Wireless Connection to the Network After initial configuration and launch of the first access point on your new wireless network, you can make subsequent configuration changes through the Administration Web pages using a wireless connection to the internal network.
Unified Access Point Administrator’s Guide Section 2 - Getting Started Dynamic and Static IP Addressing on the AP When you power on the access point, the built-in DHCP client searches for a DHCP server on the network in order to obtain an IP Address and other network information. If the AP does not find a DHCP server on the network, the AP continues to use its default Static IP Address (10.90.90.91) until you re-assign it a new static IP address (and specify a static IP addressing policy) or until the AP successfully receives network information from a DHCP server.
Unified Access Point Administrator’s Guide Section 2 - Getting Started •) To use a direct-cable connection, connect one end of an Ethernet straight-through or crossover cable to the network port on the access point and the other end of the cable to the Ethernet port on the PC, as shown in the following figure.
Unified Access Point Administrator’s Guide Section 2 - Getting Started Figure 3 - Provide Basic Settings 5.) Verify the settings on the Basic Settings page. •) Review access point description and provide a new administrator password for the access point if you do not want to use the default password, which is admin.
Unified Access Point Administrator’s Guide Section 2 - Getting Started Basic Settings From the Basic Settings page, you can view various information about the UAP, including IP and MAC address information, and configure the administrator password for the UAP. The following table describes the fields and configuration options on the Basic Settings page.
Unified Access Point Administrator’s Guide Section 2 - Getting Started Field Description System Contact Enter the name, e-mail address, or phone number of the person to contact regarding issues related to the AP. System Location Enter the physical location of the AP, for example Conference Room A. Table 4 - Basic Settings Page Connecting to the AP Web Interface by Using the IPv6 Address To connect to the AP by using the IPv6 global address or IPv6 link local address, you must enter the AP address into...
Unified Access Point Administrator’s Guide Section 2 - Getting Started Figure 4 - Command Line Interface (CLI) Connection Configuring the Ethernet Settings The default Ethernet settings, which include DHCP and VLAN information, might not work for all networks. By default, the DHCP client on the UAP automatically broadcasts requests for network information. If you want to use a static IP address, you must disable the DHCP client and manually configure the IP address and other network information.
Unified Access Point Administrator’s Guide Section 2 - Getting Started Action Commands set management dhcp-status up Use DHCP as the connection type set management dhcp-status down Use a Static IP as the connection type set management static-ip Set the Static IP address For example: set management static-ip 10.10.12.221 set management static-mask ...
Unified Access Point Administrator’s Guide Section 2 - Getting Started Using the CLI to Configure 802.1X Authentication Information The following table shows the commands used to configure the 802.1X supplicant information using the CLI. Action Command get dot1x-supplicant View 802.1X supplicant settings set dot1x-supplicant status up Enable 802.1X supplicant set dot1x-supplicant status down...
Unified Access Point Administrator’s Guide Section 2 - Getting Started Configuring Security on the Wireless Access Point You configure secure wireless client access by configuring security for each virtual access point (VAP) that you enable. You can configure up to 16 VAPs per radio that simulate multiple APs in one physical access point. By default, only one VAP is enabled.
•) “Viewing Email Alert Operational Status” on page 34 Note: The web-based UI images show the DWL-8600AP administration pages. Pages for the DWL-2600AP or DWL-3600AP will display information for one radio only. Viewing Interface Status To monitor Ethernet LAN (wired) and wireless LAN (WLAN) settings, click the Interfaces tab.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Modify Wireless Settings page. For information about configuring these settings, see “Wireless Settings” on page 37 “Modifying Radio Settings” on page 40. Viewing Events The Events page shows real-time system events on the AP such as wireless clients associating with the AP and being authenticated.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description Persistence Choose Enabled to save system logs to non-volatile memory so that the logs are not erased when the AP reboots. Choose Disabled to save system logs to volatile memory. Logs in volatile memory are deleted when the system reboots.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Note: To apply your changes, click Apply. Changing some settings might cause the AP to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change AP settings when WLAN traffic is low.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description Total Drop Packets Indicates total number of packets sent (in Transmit table) or received (in Received table) by this AP that were dropped. Total Drop Bytes Indicates total number of bytes sent (in Transmit table) or received (in Received table) by this AP that were dropped.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status A TSPEC is a traffic specification that is sent from a QoS-capable wireless client to an AP requesting a certain amount of network access for the traffic stream (TS) it represents. A traffic stream is a collection of data packets identified by the wireless client as belonging to a particular user priority.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description From Station Shows the number of packets and bytes received from the wireless client and the number of packets and bytes that were dropped after being received. Also shows the number of packets: •) in excess of an admitted TSPEC.
Page 29
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description AP Detection for To allow the AP radios to perform neighbor AP detection and collect information about Radio neighbor APs, click Enabled. To disable neighbor AP detection on the radios, click Disabled. If you change the AP detection mode, click Apply to save the new settings.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description Known AP List Action An AP can appear in the Known AP List if it has been moved from the Detected Rogue AP List by clicking the Grant button or if the MAC address of the AP appears in an AP list that has been imported.
The UAP can learn about D-Link Unified Wireless Switches on the network through DHCP responses to its initial DHCP request. The Managed AP DHCP page displays the DNS names or IP addresses of up to four D-Link Unified Wireless Switches that the AP learned about from a DHCP server on your network.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description AP and VAP Status Interface Indicates the name of the Radio or VAP interface. Access Category Indicates Current Access Category associated with this Traffic Stream (voice or video). Status Indicates whether the TSPEC session is enabled (up) or not (down) for the corresponding Access Category.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description TSPEC Statistics Indicates the total number of accepted and the total number of rejected voice Traffic Summary for Voice Streams. TSPEC Statistics Indicates the total number of accepted and the total number of rejected video Traffic Summary for Video Streams.
Unified Access Point Administrator’s Guide Section 3 - Viewing Access Point Status Field Description Multicast Frames Count of successfully transmitted MSDU frames where the multicast bit is set in the Transmitted destination MAC address. Duplicate Frame Number of times a frame is received and the Sequence Control field indicates is a duplicate. Count Failed Transmit Number of times an MSDU is not transmitted successfully due to transmit attempts...
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Section 4 - Managing the Access Point This section describes how to manage the UAP and contains the following subsections: •) “Ethernet Settings” on page 35 •) “Wireless Settings” on page 37 •) “Modifying Radio Settings”...
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Hostname Enter a hostname for the AP. The hostname appears in the CLI prompt. •) The hostname has the following requirements: •) The length must be between 1 – 63 characters. •) Upper and lower case characters, numbers, and hyphens are accepted.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Wireless Settings Wireless settings describe aspects of the local area network (LAN) related specifically to the radio device in the access point (802.11 Mode and Channel) and to the network interface to the access point (MAC address for access point and Wireless Network name, also known as SSID).
Page 38
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Mode The Mode defines the Physical Layer (PHY) standard the radio uses. Note: The modes available depend on the country code setting and the radio selected. Select one of the following modes for radio 1: •) IEEE 802.11a is a PHY standard that specifies operating in the 5 GHz U-NII band using orthogonal frequency division multiplexing (OFDM).
AE protocol in order to collect information about the RF devices detected by the APs. Using the AE protocol, D-Link supports direct communication between AE and the APs. When operating in managed mode, the AE is configured with the IP address of the managed access points from which it collects information.
2.4 GHz IEEE 802.11n mode cannot detect AeroScout tags. Note: The following notes apply to AeroScout product and protocol support: •) D-Link does not sell AeroScout products. Contact AeroScout for AeroScout hardware, software or deployment information. •) The AE protocol does not support any authentication or encryption between the AE server and the access point.
Page 41
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Mode The Mode defines the Physical Layer (PHY) standard the radio uses. Note: The modes available depend on the country code setting and the radio selected. Select one of the following modes for radio 1: •) IEEE 802.11a is a PHY standard that specifies operating in the 5 GHz U-NII band using orthogonal frequency division multiplexing (OFDM).
Page 42
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Short Guard Interval This field is available only if the selected radio mode includes 802.11n. Supported The guard interval is the dead time, in nanoseconds, between OFDM symbols. The guard interval prevents Inter-Symbol and Inter-Carrier Interference (ISI, ICI).
Page 43
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description RTS Threshold Specify a Request to Send (RTS) Threshold value between 0 and 2347. The RTS threshold indicates the number of octets in an MPDU, below which an RTS/CTS handshake is not performed.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description TSPEC Voice ACM Specify an upper limit on the amount of traffic the AP attempts to transmit on the wireless Limit medium using a voice AC to gain access. TSPEC Video ACM Regulates mandatory admission control for the video access category.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Figure 19 - Scheduler Configuration Field Description Global Scheduler A global switch to enable or disable the scheduler feature. The default is Disable. Mode Scheduler Operational Status Status The operational status of the Scheduler.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Figure 20 - Scheduler Configuration (Modify Rule) Click Apply to save the new configuration settings. Note: After making any modifications, you must click Apply to apply the changes and to save the settings.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Radio Scheduler Profile Operational Status 1 or 2 From the menu, select the Scheduler profile to associate with Radio 1 or Radio 2. Scheduler Profile From the menu, select the Scheduler profile to associate with the Radio. Status The operational status of the Scheduler.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Figure 22 - Modify Virtual Access Point Settings The following table describes the fields and configuration options on the VAP page. Field Description RADIUS IP Address Specify the IP version that the RADIUS server uses. Type You can toggle between the address types to configure IPv4 and IPv6 global RADIUS address settings, but the AP contacts only the RADIUS server or servers for the address...
Page 49
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Radio Select the radio to configure. VAPs are configured independently on each radio. You can configure up to 16 VAPs for each radio. VAP0 is the physical radio interface, so to disable VAP0, you must disable the radio.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Note: After you configure the VAP settings, you must click Apply to apply the changes and to save the settings. Changing some settings might cause the AP to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description WEP Keys You can specify up to four WEP keys. In each text box, enter a string of characters for each key. The keys you enter depend on the key type selected: •) ASCII —...
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point This mode requires the use of an external RADIUS server to authenticate users. The AP requires a RADIUS server capable of EAP, such as the Microsoft Internet Authentication Server. To work with Windows clients, the authentication server must support Protected EAP (PEAP) and MSCHAP V2.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Enable RADIUS Select this option to allow the secondary RADIUS server to authenticate wireless clients if FailThrough the authentication with the primary RADIUS server is unsuccessful, or if the primary RADIUS server is unavailable.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Broadcast Key Enter a value to set the interval at which the broadcast (group) key is refreshed for clients Refresh Rate associated to this VAP (the default is 300). The valid range is 0–86400 seconds.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Cipher Suites Select the cipher suite you want to use: •) TKIP •) CCMP (AES) •) TKIP and CCMP (AES) By default both TKIP and CCMP are selected. When both TKIP and CCMP are selected, client stations configured to use WPA with RADIUS must have one of the following: •) A valid TKIP RADIUS IP address and RADIUS Key •) A valid CCMP (AES) IP address and RADIUS Key...
Note: When you move an AP from Standalone Mode to Managed Mode, WDS is disabled. In Managed Mode, you configure the AP by using the D-Link Unified Wireless Switch. The Administrator UI, as well as Telnet, SSH, and SNMP access are disabled when the AP is in Managed Mode.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point •) Both APs participating in a WDS link must be on the same Radio channel and using the same IEEE 802.11 mode. (See “Modifying Radio Settings” on page 40 for information on configuring the Radio mode and channel.) •) When 802.11h is operational, setting up two WDS links can be difficult.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Field Description Characters Indicates the number of characters required in the WEP key. Required The number of characters required updates automatically based on how you set Key Length and Key Type.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Configuring a MAC Filter and Station List on the AP The MAC Authentication page allows you to control access to UAP based on MAC addresses. Based on how you set the filter, you can allow only client stations with a listed MAC address or deny access to the stations listed.
On the UAP, you can configure the IP addresses of up to four D-Link Unified Wireless Switches that can manage it. In order to manage the AP, the switch and AP must discover each other. There are multiple ways for a switch to discover an AP.
Configuring Managed Access Point Settings To add the IP address of a D-Link Unified Wireless Switch to the AP, click the Managed Access Point tab under the Manage heading and update the fields shown in the table below.
If this happens, wireless clients will temporarily lose connectivity. We recommend that you change AP settings when WLAN traffic is low. If the UAP successfully authenticates with a D-Link Unified Wireless Switch, you will loose access to the AP through the Administrator UI.
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point Figure 31 - Modify 802.1X Supplicant Authentication Settings Field Description 802.1X Supplicant Click Enabled to enable the Administrative status of the 802.1X Supplicant. Click Disabled to disable the Administrative status of the 802.1X Supplicant. EAP Method Select one of the following EAP methods to use for communication between the AP and the authenticator:...
Unified Access Point Administrator’s Guide Section 4 - Managing the Access Point To create an access list, click the Management ACL tab. Figure 32 - Configure Management Access Control Parameters Field Description Management ACL Enable or disable the management ACL feature. At least one IPv4 address should be Mode configured before enabling Management ACL Mode.
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Section 5 - Configuring Access Point Services This section describes how to configure services on the UAP and contains the following subsections: •) “Web Server Settings” on page 65 •) “Configuring SNMP on the Access Point”...
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Field Description Generate HTTP SSL Select this option to generate a new SSL certificate for the secure Web server. This should Certificate be done once the access point has an IP address to ensure that the common name for the certificate matches the IP address of the UAP.
SNMP agent on the AP to the D-Link System MIB. To enable SNMP set requests, click Enabled. To disable SNMP set requests, click Disabled. Read-write If you have enabled SNMP set requests you can set a read-write community name.
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Field Description Hostname, Specify the IPv4 DNS hostname or subnet of the machines that can execute get and set address or subnet requests to the managed devices. The valid range is 1-256 characters. of Network As with community names, this provides a level of security on SNMP settings.
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Field Description SSH Status Choose to either enable or disable SSH access to the AP CLI: •) To permit remote access to the AP by using SSH, click Enabled. •) To prevent remote access to the AP by using SSH, click Disabled.
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Figure 37 - Modify QoS Queue Parameters Field Description EDCA Template Possible options are: Default, Optimized for Voice, and Custom. AP EDCA Parameters Queue Queues are defined for different types of data transmitted from AP-to-station: •) Data 0 (Voice) —...
Page 71
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Field Description Max. Burst Length The Max. Burst Length is an AP EDCA parameter and only applies to traffic flowing from the AP to the client station. This value specifies (in milliseconds) the maximum burst length allowed for packet bursts on the wireless network.
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Note: After you configure the QoS settings, you must click Apply to apply the changes and to save the settings. Changing some settings might cause the AP to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity.
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services Field Description Non Urgent Severity Configures the severity level for log messages that are considered to be non-urgent. Messages in this category are collected and sent in a digest form at the time interval specified by the Log Duration field.
Unified Access Point Administrator’s Guide Section 5 - Configuring Access Point Services To set the system time either manually or by specifying the address of the NTP server for the AP to use, click the Services > Time Settings (NTP) tab and update the fields as described in the table below. Figure 39 - Time Settings (NTP) Field Description...
Unified Access Point Administrator’s Guide Section 6 - Configuring SNMPv3 Section 6 - Configuring SNMPv3 This section describes how to configure the SNMPv3 settings on the UAP and contains the following subsections: •) “Configuring SNMPv3 Views” on page 75 •) “Configuring SNMPv3 Groups” on page 76 •) “Configuring SNMPv3 Users”...
Unified Access Point Administrator’s Guide Section 6 - Configuring SNMPv3 Note: After you configure the SNMPv3 Views settings, you must click Apply to apply the changes and to save the settings. Configuring SNMPv3 Groups SNMPv3 groups allow you to combine users into groups of different authorization and access privileges. By default, the UAP has two groups: •) RO —...
Unified Access Point Administrator’s Guide Section 6 - Configuring SNMPv3 Field Description Read Views Select the read access to management objects (MIBs) for the group: •) view-all — The group is allowed to view and read all MIBs. •) view-none — The group cannot view or read MIBs. SNMPv3 Groups This field shows the default groups and the groups that you have defined on the AP.
Unified Access Point Administrator’s Guide Section 6 - Configuring SNMPv3 Note: After you configure the SNMPv3 Users settings, you must click Apply to apply the changes and to save the settings. Configuring SNMPv3 Targets SNMPv3 Targets send “inform” messages to the SNMP manager. Each target is identified by a target name and associated with target IP address, UDP port, and SNMP user name.
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point Section 7 - Maintaining the Access Point This section describes how to maintain the UAP. From the UAP Administrator UI, you can perform the following maintenance tasks: •) “Saving the Current Configuration to a Backup File” on page 79 •) “Restoring the Configuration from a Previously Saved File”...
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point Figure 46 - Confirmation Prompt 3.) To proceed with the download, select OK. A dialog box opens allowing you to view or save the file. 4.) Select the Save File option and select OK. 5.) Use the file browser to navigate to the directory where you want to save the file, and click OK to save the file.
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point 2.) Use the Browse button to select the file to restore. 3.) Click the Restore button. A File Upload or Choose File dialog box displays. 4.) Navigate to the directory that contains the file, then select the file to upload and click Open. (Only those files created with the Backup function and saved as .xml backup configuration files are valid to use with Restore;...
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point Figure 50 - Manage Firmware (TFTP) 2.) Enter a name (1 to 63 characters) for the image file in the Image Filename field, including the path to the directory that contains the image to upload.
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point 5.) To verify that the firmware upgrade completed successfully, check the firmware version shown on the Upgrade page (or the Basic Settings page). If the upgrade was successful, the updated version name or number is indicated.
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point Figure 53 - Packet Capture Status The following table describes information the packet capture status fields display. Field Description Current Capture Shows whether packet capture is running or stopped. Status Packet Capture Shows elapsed capture time.
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point Upon activation, the packet capture proceeds until one of the following occurs: •) The capture time reaches configured duration. •) The capture file reaches its maximum size. •) The administrator stops the capture. During the capture, you can monitor the capture status, elapsed capture time, and the current capture file size.
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point To capture packets on the Ethernet interface of the AP and VAP0 on radio 1 using IP port 58000, start two Wireshark sessions and specify the following interfaces: rpcap://192.168.1.10:58000/eth0 rpcap://192.168.1.10:58000/wlan0 When you are capturing traffic on the radio interface, you can disable beacon capture, but other 802.11 control frames...
Unified Access Point Administrator’s Guide Section 7 - Maintaining the Access Point Field Description Remote Capture Specify the remote port to use as the destination for packet captures. (range 1 to 65530). Port Table 50 - Remote Packet Capture Packet Capture File Download Packet Capture File Download allows you to download the capture file by TFTP to a configured TFTP server or by HTTP(S) to a PC.
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Section 8 - Configuring Client Quality of Service (QoS) This section describes how to configure QoS settings that affect traffic from the wireless clients to the AP. By using the UAP Client QoS features, you can limit bandwidth and apply ACLs and DiffServ policies to the wireless interface.
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description Client QoS Mode Enable or disable QoS operation on the VAP selected in the VAP menu. QoS must be enabled globally (from the Client QoS Global Admin Mode field) and on the VAP (QoS Mode field) for the Client QoS settings to be applied to wireless clients.
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) MAC ACLs MAC ACLs are Layer 2 ACLs. You can configure the rules to inspect fields of a frame such as the source or destination MAC address, the VLAN ID, or the Class of Service 802.1p priority. When a frame enters or exits the AP port (depending on whether the ACL is applied in the up or down direction), the AP inspects the frame and checks the ACL rules against the content of the frame.
Page 91
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description ACL Type Select the type of ACL to configure: •) IPv4 •) IPv6 •) MAC IPv4 and IPv6 ACLs control access to network resources based on Layer 3 and Layer 4 criteria.
Page 92
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description Source Port Select this field to include a source port in the match condition for the rule. The source port is identified in the datagram header. Once you select the field, choose the port name or enter the port number.
Page 93
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description IP Precedence Select this option and enter a value to use the packet’s IP Precedence value in the IP header as match criteria. You can select only one service type (DSCP, IP Precedence or TOS bits) to use for match criteria.
Page 94
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description Source Port Select this option to include a source port in the match condition for the rule. The source port is identified in the datagram header. Once you select the field, choose the port name or enter the port number.
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description EtherType Select the EtherType field to compare the match criteria against the value in the header of an Ethernet frame. Select an EtherType keyword or enter an EtherType value to specify the match criteria. Select from List Select Select one of the following protocol types: •) appletalk...
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Defining DiffServ To use DiffServ for Client QoS, use the Class Map and Policy Map pages to define the following categories and their criteria: •) Class: create classes and define class criteria •) Policy: create policies, associate classes with policies, and define policy statements Once you define the class and associate it with a policy, apply the policy to a specified VAP on the VAP QoS Parameters page.
Page 97
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description Class Map Name Select name of the class to configure. Use the fields in the Match Criteria Configuration area to match packets to a class. Select the check box for each field to be used as a criterion for a class and enter data in the related field.
Page 98
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description IP DSCP To use IP DSCP as a match criteria, select the check box and select a DSCP value keyword or enter a DSCP. Select from List Select from a list of DSCP types.
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description EtherType Select the EtherType field to compare the match criteria against the value in the header of an Ethernet frame. Select an EtherType keyword or enter an EtherType value to specify the match criteria. Select from List Select Select one of the following protocol types: •) appletalk...
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Creating a DiffServ Policy Map Use the Policy Map page to create DiffServ policies and to associate a collection of classes with one or more policy statements.
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description Drop Select Drop to specify that all packets for the associated traffic stream are to be dropped if the class map criteria is met. Mark Class of Select this field to mark all packets for the associated traffic stream with the specified class Service...
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) Field Description ACL Type Up Shows the type of ACL that is applied to traffic in the inbound (client-to-AP) direction, which can be one of the following: •) IPv4: The ACL examines IPv4 packets for matches to ACL rules.
Unified Access Point Administrator’s Guide Section 8 - Configuring Client Quality of Service (QoS) RADIUS Description Type/Range Attribute Vendor-Specific (26), 6132,121 Access list identifier to be applied to 802.1X authenticated Type: string LVL7-Wireless-Client- wireless client traffic in the inbound (up) direction. 5-36 characters (not null-terminated) ACL-Up If this attribute refers to an ACL that does not exist on the AP, all...
Note: For two APs to be in the same cluster, they do not need to have the same number of radios; however, the supported capabilities of the radios should be same. Clustering APs Only identical models may be clustered together. For example, the DWL-2600AP can only form a cluster with other DWL-2600APs. Viewing and Configuring Cluster Members The Access Points page allows you to start or stop clustering on an AP, view the cluster members, and configure the location and cluster name for a cluster member.
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs Figure 64 - Manage Access Points In The Cluster (Active) If clustering is currently disabled on the AP, the Start Clustering button is visible. If clustering is enabled, the Stop Clustering button is visible.
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs Removing an Access Point from the Cluster To remove an access point from the cluster, do the following. 1.) Go to the Administration Web pages for the clustered access point. The Administration Web pages for the standalone access point are displayed.
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs A session in this context is the period of time in which a user on a client device (station) with a unique MAC address maintains a connection with the wireless network. The session begins when the client logs on to the network, and the session ends when the client either logs off intentionally or loses the connection for some other reason.
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs Configuring and Viewing Channel Management Settings When Channel Management is enabled, the UAP automatically assigns radio channels used by clustered access points. The automatic channel assignment reduces mutual interference (or interference with other access points outside of its cluster) and maximizes Wi-Fi bandwidth to help maintain the efficiency of communication over the wireless network.
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs Viewing Current Channel Assignments and Setting Locks The Current Channel Assignments section shows a list of all access points in the cluster by IP Address. The display shows the band on which each AP is broadcasting (a/b/g/n), the current channel used by each AP, and an option to lock an AP on its current radio channel so that it cannot be re-assigned to another.
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs Field Description Change channels Specify the minimum percentage of interference reduction a proposed plan must achieve in if interference is order to be applied. The default is 75 percent. reduced by at least Use the drop-down menu to choose percentages ranging from 5 percent to 75 percent.
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs Figure 67 - View Neighboring Access Points The following table describes details about the Wireless Neighborhood information. Field Description Display neighboring Click one of the following radio buttons to change the view: •) In cluster —...
Unified Access Point Administrator’s Guide Section 9 - Clustering Multiple APs Viewing Details for a Cluster Member To view details on a cluster member AP, click on the IP address of a cluster member at the top of the page. The following figure shows the Neighbor Details of the AP with an IP address of 10.90.90.91.
Unified Access Point Administrator’s Guide Appendix A - Default AP Settings Appendix A - Default AP Settings When you first power on a UAP, it has the default settings shown in the following table. Feature Default System Information User Name admin Password admin...
Unified Access Point Administrator’s Guide Appendix A - Default AP Settings Feature Default VLAN ID Network Name (SSID) dlink1 through dlink16 Broadcast SSID Allow Security Mode None (plain text) MAC Authentication Type None RADIUS IP Address 10.90.90.1 RADIUS Key secret RADIUS Accounting Disabled Redirect Mode...
DWL-6610AP: 1.3.6.1.4.1.171.10.143.1.1.26 DWL-8600AP: 1.3.6.1.4.1.171.10.37.29.1.26 DWL-6700AP: 1.3.6.1.4.1.171.10.142.1.1.26 DWL-6600AP: 1.3.6.1.4.1.171.10.128.1.1.26 DWL-3600AP: 1.3.6.1.4.1.171.10.129.1.1.26 DWL-2600AP: 1.3.6.1.4.1.171.10.130.1.1.26 Configuring a VAP This example shows how to configure VAP 1 with the following non-default settings: •) VLAN ID: 2 •) SSID: Marketing •) Security: WPA Personal using WPA2 with CCMP (AES) VAP Configuration from the Web Interface 1.) Log onto the AP and navigate to the Manage >...
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples VAP Configuration from the CLI 1.) Connect to the AP by using Telnet, SSH, or a serial connection. 2.) Enable VAP 1. set vap vap1 status up 3.) Set the VLAN ID to 2. set vap vap1 vlan-id 2 Note: The previous command sets the VLAN ID to 2 for VAP 1 on both radios.
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples Configuring Radio Settings This example shows how to configure Radio 12 with the following settings: •) Mode: IEEE 802.11b/g/n •) Channel: 6 •) Channel Bandwidth: 40 MHz •) Maximum Stations: 100 •) Transmit Power: 75% Radio Configuration from the Web Interface 1.) Log onto the AP and navigate to the Manage >...
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples 7.) Set the transmit power to 75 percent. set radio wlan01 tx-power 75 8.) View information about the radio settings. get radio wlan01 detail Radio Configuration Using SNMP 1.) Load the DLINK-WLAN-ACCESS-POINT-X600-MIB module. 2.) From the MIB tree, navigate to the objects in the apRadio table (apRadioBss >...
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples WDS Configuration from the CLI 1.) Connect to the MyAP1 by using Telnet, SSH, or a serial connection. 2.) Configure the remote MAC address for MyAP2. set interface wlan0wds0 status up remote-mac 00:30:AB:00:00:B0 3.) Set WPA (PSK) as the encryption type for the link.
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples 5.) Click Start Clustering to enable the clustering feature. After you refresh the page, other APs that are on the same bridged segment, have radios in the same operating mode, are enabled for clustering, and have the same cluster name appear in the Access Points table. 6.) Go to the Channel Management page to view the channel assignments.
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples Configuring Client QoS This example shows how to enable client QoS, configure an ACL and a DiffServ policy on the AP, and to apply the ACL and the Policy to traffic transmitted from clients associated with VAP 2 and received by the AP. The IPv4 ACL is named acl1 and contains two rules.
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples •) Wild Card Mask: 0.0.0.255 •) Source Port: Select the option •) Select From List (Source Port): www 7.) Click Apply to save the rule. Figure 76 - Configuring QoS by Using the Web Interface (Rule2) 8.) Select New Rule from the Rule menu and create another rule with the following settings: •) Action: Permit •) Match Every: Clear the option...
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples 1.) Log onto the AP and navigate to the Client QoS > Class Map page. Figure 78 - Configuring QoS by Using the Web Interface (Class Map Name) 2.) Enter class_voip in the Class Map Name field and click Add Class Map. The page refreshes and additional fields appear.
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples Figure 81 - Configure Client QoS DiffServ Policy Map Settings (Rule) 10.) For the class_voip Class Map, select the Mark IP Dscp option, and then select ef from the Select From List menu.
Page 125
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples 4.) Add another rule to acl1 that allows all traffic from the host with an IP address of 192.168.1.23. add rule acl-name acl2 acl-type ipv4 action permit protocol ip src-ip 192.168.1.23 src-ip- mask 0.0.0.0 5.) Enable Client QoS on the AP.
Page 126
Unified Access Point Administrator’s Guide Appendix B - Configuration Examples •) Use 1.3.6.1.4.1.171.10.128.1.1.26.10.3.1.16.1.4.97.99.108.49.2 to set apQosAclRuleCommit to a value of 1 (true), which saves the rule. 6.) Use the apQosGlobalMode object to set the status to up (1), which enables Client QoS on the AP. 7.) Walk the apVapDescription object to view the instance ID for VAP 2 (wlan0vap2).
Unified Access Point Administrator’s Guide Appendix C - DWL-6700AP Profile and Configuration Table Appendix C - DWL-6700AP Profile and Configuration Table DWL-6700AP doesn’t support some features like, IEEE 802.1X Authentication, CLI command (no console port supported), TSPEC etc…, details please see the following table. Radio Configuration DWL-6700AP DWL-6600AP...
Page 128
Unified Access Point Administrator’s Guide Appendix C - DWL-6700AP Profile and Configuration Table MAC Authentication Redirect Redirect URL Wireless ARP Suppression Mode L2 Distributed Tunneling Mode RADIUS Autentication Server Name RADIUS Autentication Server Status RADIUS Accounting Server Name RADIUS Accounting Server Status RADIUS Use Network Configuraiton RADIUS Accounting Security...
Unified Access Point Administrator’s Guide Appendix D - Statements Appendix D - Statements Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
Page 130
Unified Access Point Administrator’s Guide Appendix D - Statements les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux. Radiation Exposure Statement: This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.